Approved changes feed: RSS · Atom

cpe:2.3:a:brightsign:brightsign_os_series_4_players:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrightsign (9412761d-626b-5bc4-8852-2751380da8a9)
ProductBrightsign Os Series 4 Players (3c951d07-5b64-59bd-9768-3d53f60e2a0a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54756 vulnerable 2026-06-08 07:33:13.167623 BrightSign Players Use of Default Credentials
HIGH (8.4)
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old installations are encouraged to change all default passwords.
Published: 2026-02-12T16:34:18.821Z
Updated: 2026-02-12T18:45:20.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3925 vulnerable 2026-06-08 07:23:10.153452 BrightSign Players Execution with Unnecessary Privileges
HIGH (7.8)
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained.
Published: 2025-05-07T20:18:22.457Z
Updated: 2025-05-08T14:04:48.853Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.